
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
File: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json)
Hash identifier: pJ4IMuVLbeRrNyZwWJ6DA4rLhLNsZym+PbfKHRx5UL8=
Subject key identifier: 43:97:6A:56:BD:D7:0C:B3:44:7A:D7:9D:51:63:3A:E3:3D:50:8E:77
Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA
Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
Manifest number: 01D0
Signing time: Sun 01 Mar 2026 05:23:20 +0000
Manifest this update: Sun 01 Mar 2026 05:23:19 +0000
Manifest next update: Sun 08 Mar 2026 05:23:19 +0000
Files and hashes: 1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: 0rIMd0ri79+X0oJCW1SwJpz2skKzFvQnBWSPX6RZ61Q=)
2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: wKiIt1esrHOB+SKAyHneV8WULzJobDN24pHkGLD9384=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl
rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
Validity
Not Before: Mar 1 05:23:19 2026 GMT
Not After : Mar 8 05:23:19 2026 GMT
Subject: CN=69a3cd48-67ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:56:94:ae:16:52:a4:27:a5:bf:71:58:2d:
58:2c:e9:88:2b:8a:f4:37:b0:72:7f:ba:e2:36:bc:
a4:50:a4:fc:05:69:4d:05:47:66:57:36:3e:cf:9a:
5b:1f:65:61:7d:93:2c:6f:c1:64:81:15:3e:55:9a:
2d:48:19:58:1a:27:6b:29:ab:e0:11:6c:2d:2f:de:
62:de:c2:40:b5:fe:b8:17:75:b5:c0:6f:5a:90:95:
84:80:d7:19:f7:f4:b0:59:29:fc:db:f6:c7:a8:d1:
12:96:92:3b:f2:43:4d:15:dc:2e:95:e9:b3:a0:49:
41:d3:7a:8c:bb:66:e7:03:95:06:9e:72:0a:9d:81:
c0:81:e1:d8:b7:0f:33:7b:06:6f:d7:a4:7b:18:04:
43:96:53:51:6e:9f:62:d6:46:1e:08:d9:4f:db:3d:
36:2d:c4:5c:3d:b1:05:e8:47:cd:42:a7:16:89:c9:
84:6b:99:32:97:e1:aa:32:7f:ce:0f:38:d6:dd:ca:
fb:95:9e:d4:78:6c:34:e2:21:a9:91:a3:68:76:79:
f2:b2:b9:3a:cf:5e:a4:44:8c:f4:52:49:a4:80:18:
1e:18:c9:15:fe:a3:46:c8:6c:03:dc:fb:8a:ca:28:
89:36:83:c4:5e:95:2c:43:78:8d:e4:74:a7:4c:78:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:6A:56:BD:D7:0C:B3:44:7A:D7:9D:51:63:3A:E3:3D:50:8E:77
X509v3 Authority Key Identifier:
keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:01:16:a3:db:18:fc:15:59:bc:68:7d:38:00:90:7a:9a:0f:
17:22:65:ea:84:f1:5b:ae:05:f2:3c:42:c6:fb:f3:17:e4:14:
de:f3:b0:cd:4f:d6:9b:ab:ce:be:bf:cd:01:eb:63:73:17:b6:
35:7f:17:42:72:c8:a4:56:8d:f1:21:e6:5f:87:ac:72:cf:b3:
73:0e:8b:65:44:ff:90:67:e5:35:27:64:fc:7f:dd:3e:b2:d7:
0f:68:65:05:30:66:dd:90:74:14:46:9b:11:08:68:90:4b:ff:
1e:2e:e0:59:ef:43:66:dc:d9:fb:b2:f6:32:b1:37:d6:2a:55:
68:08:d9:d2:f4:cc:90:fc:16:80:b6:3f:36:ef:43:9f:fa:9d:
03:d5:39:83:83:4e:ef:91:08:6d:78:df:81:93:2b:6f:ce:79:
c5:bc:1e:73:05:da:69:2a:81:80:71:1d:a2:b9:15:89:c3:74:
c0:60:4d:97:f1:49:ee:3f:cf:e7:c9:c5:15:68:83:3a:71:f5:
67:8d:2a:80:cf:fd:53:98:f6:ab:e4:23:2b:68:ac:06:37:3d:
85:60:d7:68:c6:09:c6:65:de:ad:2f:10:87:a8:e8:a0:c9:99:
a6:59:4b:06:c5:07:f5:55:ed:9f:63:00:d6:6f:64:9a:6a:61:
85:9c:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:35:35 2026 by rpki-client